CVE-2026-4547
Medium · 4.3CVSS
4.3
EPSS
0.4%
Published
Mar 22, 2026
CISA due date
—
The record
A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-85030 A vulnerability has been found in HKUDS AI-Trader up to… CWE-840
- CVE-2026-82423 A vulnerability has been found in macrozheng mall up to 1.0.3. CWE-840
- CVE-2026-79406 A security vulnerability has been detected in macrozheng mall up to 1.0.3. CWE-840
- CVE-2026-75081 A vulnerability was detected in Webkul Bagisto up to 2.4.4. CWE-840
- CVE-2026-19993 A vulnerability has been found in Webkul Bagisto up to 2.4.4. CWE-840
- CVE-2026-41973 Permission control vulnerability in calls. Impact: Successful exploitation of this… CWE-840
- CVE-2026-11465 A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. CWE-840
- CVE-2026-8738 A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d. CWE-840